@treeship/verify 0.10.2 → 0.10.4

package/README.md

@@ -16,7 +16,7 @@ Three functions. Each accepts a parsed object, a JSON string, or a URL.
 
 ### `verifyReceipt(target)`
 
-Runs the JSON-level checks a Treeship Session Receipt carries: Merkle root recomputation, inclusion proof verification, leaf-count parity, timeline ordering, chain linkage.
+Runs the JSON-level checks a Treeship Session Receipt carries: Merkle root recomputation, inclusion proof verification, leaf-count parity, timeline ordering.
 
 ```typescript
 import { verifyReceipt } from '@treeship/verify';

package/dist/index.d.ts

@@ -1,3 +1,20 @@
+/**
+ * Trust roots input shape. Mirrors the on-disk
+ * `~/.treeship/trust_roots.json` so the browser-side verifier sees the
+ * same data the CLI does.
+ */
+export interface TrustRootInput {
+    key_id: string;
+    /** `ed25519:<base64url-no-pad>` */
+    public_key: string;
+    kind: 'hub_checkpoint' | 'ship' | 'agent_cert';
+    label?: string;
+    added_at?: string;
+}
+export interface TrustRootsBundle {
+    version: 1;
+    roots: TrustRootInput[];
+}
 /** Accepted input shapes across all exported functions. */
 export type VerifyTarget = string | URL | Record<string, unknown>;
 export interface VerifyCheck {
@@ -48,9 +65,9 @@ export interface CrossVerifyResult {
 /**
  * Verify a Treeship Session Receipt. Runs the checks derivable from the
  * receipt JSON alone (Merkle root recomputation, inclusion proofs, leaf
- * count, timeline ordering, chain linkage). Signature verification on
- * individual envelopes requires the original envelope bytes and is out of
- * scope for URL-fetched receipts; use the `treeship verify` CLI for that.
+ * count, timeline ordering). Signature verification on individual envelopes
+ * requires the original envelope bytes and is out of scope for URL-fetched
+ * receipts; use the `treeship verify` CLI for that.
  *
  * Accepts:
  * - a parsed receipt object (best for callers that already have the JSON)
@@ -61,13 +78,19 @@ export interface CrossVerifyResult {
 export declare function verifyReceipt(target: VerifyTarget): Promise<VerifyReceiptResult>;
 /**
  * Verify an Agent Certificate. Checks the embedded Ed25519 signature
- * against the certificate's embedded public key, then optionally
+ * against a trust root the caller pins via `trustRoots`, then optionally
  * classifies the validity window relative to `now`.
  *
+ * `trustRoots` is REQUIRED for the signature to be accepted: as of the
+ * v0.10.3 trust-root audit fix, the previous self-signed behavior (trust
+ * the embedded pubkey) is gone. Pass the same JSON shape your CLI uses
+ * (`~/.treeship/trust_roots.json`) or an array of `TrustRootInput`.
+ * Omit it to get a deliberate fail-closed result for diagnostic UIs.
+ *
  * Omit `now` (or pass `undefined`) to defer validity classification
  * (signature-only). Pass a `Date` or RFC 3339 string to check expiry.
  */
-export declare function verifyCertificate(target: VerifyTarget, now?: Date | string): Promise<VerifyCertificateResult>;
+export declare function verifyCertificate(target: VerifyTarget, now?: Date | string, trustRoots?: TrustRootsBundle | TrustRootInput[]): Promise<VerifyCertificateResult>;
 /**
  * Cross-verify a Session Receipt against an Agent Certificate. Answers
  * three questions in one call: do the receipt and certificate reference
@@ -75,6 +98,8 @@ export declare function verifyCertificate(target: VerifyTarget, now?: Date | str
  * session called authorized by the certificate?
  *
  * The `ok` field is the roll-up: true iff all three checks pass. Defaults
- * `now` to `Date.now()` if omitted.
+ * `now` to `Date.now()` if omitted. As with `verifyCertificate`,
+ * `trustRoots` is required for the certificate's embedded signature to
+ * be accepted.
  */
-export declare function crossVerify(receipt: VerifyTarget, certificate: VerifyTarget, now?: Date | string): Promise<CrossVerifyResult>;
+export declare function crossVerify(receipt: VerifyTarget, certificate: VerifyTarget, now?: Date | string, trustRoots?: TrustRootsBundle | TrustRootInput[]): Promise<CrossVerifyResult>;

package/dist/index.js

@@ -10,6 +10,15 @@
 // Same rules `treeship verify` applies from the CLI, same result shape.
 // If a new schema version lands in core, this package picks it up via
 // core-wasm without an API change here.
+/** Empty bundle is valid input -- the verifier will fail-closed. */
+function serializeTrustRoots(roots) {
+    if (!roots)
+        return '';
+    if (Array.isArray(roots)) {
+        return JSON.stringify({ version: 1, roots });
+    }
+    return JSON.stringify(roots);
+}
 let wasmBindings = null;
 async function loadWasm() {
     if (wasmBindings)
@@ -36,9 +45,9 @@ async function normalizeToJson(target) {
 /**
  * Verify a Treeship Session Receipt. Runs the checks derivable from the
  * receipt JSON alone (Merkle root recomputation, inclusion proofs, leaf
- * count, timeline ordering, chain linkage). Signature verification on
- * individual envelopes requires the original envelope bytes and is out of
- * scope for URL-fetched receipts; use the `treeship verify` CLI for that.
+ * count, timeline ordering). Signature verification on individual envelopes
+ * requires the original envelope bytes and is out of scope for URL-fetched
+ * receipts; use the `treeship verify` CLI for that.
  *
  * Accepts:
  * - a parsed receipt object (best for callers that already have the JSON)
@@ -53,17 +62,23 @@ export async function verifyReceipt(target) {
 }
 /**
  * Verify an Agent Certificate. Checks the embedded Ed25519 signature
- * against the certificate's embedded public key, then optionally
+ * against a trust root the caller pins via `trustRoots`, then optionally
  * classifies the validity window relative to `now`.
  *
+ * `trustRoots` is REQUIRED for the signature to be accepted: as of the
+ * v0.10.3 trust-root audit fix, the previous self-signed behavior (trust
+ * the embedded pubkey) is gone. Pass the same JSON shape your CLI uses
+ * (`~/.treeship/trust_roots.json`) or an array of `TrustRootInput`.
+ * Omit it to get a deliberate fail-closed result for diagnostic UIs.
+ *
  * Omit `now` (or pass `undefined`) to defer validity classification
  * (signature-only). Pass a `Date` or RFC 3339 string to check expiry.
  */
-export async function verifyCertificate(target, now) {
+export async function verifyCertificate(target, now, trustRoots) {
     const json = await normalizeToJson(target);
     const nowStr = now === undefined ? '' : now instanceof Date ? now.toISOString() : now;
     const wasm = await loadWasm();
-    return JSON.parse(wasm.verify_certificate(json, nowStr));
+    return JSON.parse(wasm.verify_certificate(json, nowStr, serializeTrustRoots(trustRoots)));
 }
 /**
  * Cross-verify a Session Receipt against an Agent Certificate. Answers
@@ -72,9 +87,11 @@ export async function verifyCertificate(target, now) {
  * session called authorized by the certificate?
  *
  * The `ok` field is the roll-up: true iff all three checks pass. Defaults
- * `now` to `Date.now()` if omitted.
+ * `now` to `Date.now()` if omitted. As with `verifyCertificate`,
+ * `trustRoots` is required for the certificate's embedded signature to
+ * be accepted.
  */
-export async function crossVerify(receipt, certificate, now) {
+export async function crossVerify(receipt, certificate, now, trustRoots) {
     const [receiptJson, certJson] = await Promise.all([
         normalizeToJson(receipt),
         normalizeToJson(certificate),
@@ -85,5 +102,5 @@ export async function crossVerify(receipt, certificate, now) {
             ? now.toISOString()
             : now;
     const wasm = await loadWasm();
-    return JSON.parse(wasm.cross_verify(receiptJson, certJson, nowStr));
+    return JSON.parse(wasm.cross_verify(receiptJson, certJson, nowStr, serializeTrustRoots(trustRoots)));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeship/verify",
-  "version": "0.10.2",
+  "version": "0.10.4",
   "description": "Zero-dependency cryptographic verification for Treeship receipts and certificates. Runs anywhere WASM runs: Node, browser, Vercel Edge, Cloudflare Workers, AWS Lambda.",
   "license": "Apache-2.0",
   "repository": {
@@ -40,7 +40,7 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@treeship/core-wasm": "0.10.2"
+    "@treeship/core-wasm": "0.10.4"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",